The maturity journey
Deploy a Dockerized Web App to AWS
One web app, six deployments — each more automated, secure, and repeatable than the last. You start by SSH-ing into a box and running a container by hand, and finish with a registry-based, security-scanned pipeline. Every rung teaches a concept you'll reuse for the rest of your DevOps career.
The climb · manual → secured
- L0ManualNot started
Manual EC2 + Docker
Deploy by hand to understand the fundamentals.
Open blueprint - L1ScriptedNot started
EC2 + Docker Bootstrap Script
Provision the server once, the same way, every time.
Open blueprint - L2IaCNot started
Terraform EC2 + Security Group + Docker
Declare your infrastructure instead of clicking it.
Open blueprint - L3CI/CDNot started
GitHub Actions Deploy to EC2
Ship on every push instead of deploying by hand.
Open blueprint - L4RegistryNot started
GitHub Actions + ECR + Docker Compose
Build once, push an immutable image, pull to deploy.
Open blueprint - L5SecurityNot started
DevSecOps: Trivy + Checkov + Hardening
Shift security left — scan, harden, and clean up.
Open blueprint - L6ObservabilitySoon
Observability
See what's happening: logs, metrics, and alerts.
- L7KubernetesSoon
Kubernetes
Run on an orchestrator with manifests and Helm.
- L8GitOpsSoon
GitOps
Git is the source of truth; ArgoCD reconciles state.
- L9ProductionSoon
Production-like
Remote state, guardrails, cost awareness, runbooks.